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ELEVATOR WITH ACCESS SECURITY 

Technical Field 

This invention relates to monitoring authorization for persons gaining 
access to elevators and floor landings of a building by means of an elevator. 



5 Background Art 

For security purposes, it has been known to prevent elevator start-up 
in the event that an unauthorized passenger has entered the elevator. 
Typically, passengers carry portable devices which emit identification 
numbers (IDs) usually using RF or IR electromagnetic radiation. In commonly 

10 owned, copending U.S. patent application Serial No. 09/1 1 1 ,355, filed June 
7, 1998, an elevator system determines when a passenger has entered an 
elevator, other than the elevator assigned to respond to an automatically 
entered, destination call. However, no prior systems determine if a 
passenger, generally authorized to use the elevator, nonetheless exits on a 

15 floor for which the passenger is not authorized, or if a passenger without a 
portable device may be impermissibly on an elevator. 

Disclosure of Invention 

Objects of the invention include determining when a passenger, not 
20 authorized to do so, attempts to ride an elevator during a restricted trip, or 
exits an elevator onto a secure floor landing; and determining when 
passengers without IDs are on or exiting an elevator. 

According to the present invention, directional motion detectors at 
the entrance to each elevator on a secure floor of a building, when an 
25 elevator is present with its doors open, count the number of passengers who 
enter and leave the elevator, to maintain a current passenger count; a poll of 
passengers wearing portable, ID-emitting devices, determines whether 
unknown passengers and which particular known passengers are in the 
elevator, by default determining if unauthorized passengers have left the 
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elevator at a secure floor; a comparison of exiting passenger ID numbers with 
authorized passenger ID numbers will set an alarm if unauthorized or 
unknown persons have left the elevator at a secure floor, the doors on the 
floor may be locked, security personnel notified, and/or an alarm condition 

5 set, or sounded. 

In further accord with the invention, passengers boarding and exiting 
an elevator are counted; a count of IDs sensed indicates if passengers 
without IDs are on board and IDs are compared with authorizations on secure 
elevator trips to restrict elevator passengers to those authorized for a 
10 particular, secure trip; otherwise the car is disabled. 

In one embodiment, motion detectors on either side of the hoistway 

r 

door entrance and on either side of the elevator door entrance determine the 
direction of passenger movement differentially, depending on which devices 
sense motion first. In a second embodiment of the invention, doppler motion 
15 detectors (of the type used in stores to prevent exiting through automatic 
entrance doors) determines the direction of passenger movement. 

Other objects, features and advantages of the present invention will 
become more apparent in the light of the following detailed description of 
exemplary embodiments thereof, as illustrated in the accompanying drawing. 

20 

Brief Description of the Drawings 

Fig. 1 is a stylistic, schematic, plan illustration of a pair of elevators 
utilizing pairs of motion detectors in accordance with the invention. 

Fig. 2 is a stylistic, schematic, plan illustration of a pair of elevators 
25 utilizing doppler motion detectors in accordance with the invention. 

Figs. 3-5 are illustrative, functional flow diagrams illustrating 
principles of the present invention. 
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Best Mode for Carrying Out the Invention 
Referring to Fig. 1 , a pair of elevators 6, 7 each include a cab 8 
having a car operating pane! 9, guide rails 1 1, counterweights 13 with guide 
rails 14, and doors 16. The elevators are disposed in a building 17 to serve 
floor landings 18, access to which is gained through hoistway doors 20. The 
description thus far is of a conventional elevator system. 

For this invention, all authorized passengers carry conventional 
portable devices that transmit ID numbers assigned to the corresponding 
passenger. These may be passive RFIDs (such as are used in gasoline 
stations) or other RF or IR transmitters. 

According to the invention, each elevator has a pair of motion 
detectors 22 which may be conventional, having a sensitivity pattern which 
causes them to sense only motion on the elevator car 6, 7, and not on an 
adjacent landing 1 8. Adjacent to the hoistway doors 20 on each landing 1 8, 
there is a pair of motion detectors 23 which may be conventional, having a 
sensitivity pattern that causes them to sense motion only on the landing 1 8, 
and not within one of the elevators 6, 7. As a passenger moves from the 
landing 18 into the elevator 7, for instance, the motion detectors 23 will 
provide a signal prior to the detectors 22, thus indicating that passenger 
movement is in the entering direction. As a passenger leaves the elevator 7, 
for instance, the motion detectors 22 will provide a signal prior to the motion 
detectors 23, thus indicating that passenger movement is in the exiting 
direction. 

Referring to Fig. 2, each of the elevators in another embodiment of 
the invention have a doppler motion detector 25 disposed in a suitable 
position, such as above the entrance, which may be conventional, and which 
may be mounted in any conventional fashion to suit the particular installation 
involved. Similarly, each entrance to an elevator from the elevator corridor 
1 8 through hoistway doors 20 has a doppler motion detector 26 disposed in 
a suitable position, such as above the entrance, which may be conventional, 
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and which may be mounted in any conventional fashion to suit the particular 
implementation of the invention. Passengers entering the elevator 7, for 
instance, will cause the detector 25 to provide a signal, whereas the detector 
26 will provide no signal. Passengers leaving the elevator 7, for example, 
5 will cause the detector 26 to provide a signal, whereas the detector 25 will 
provide no signal. Thus a signal from the detector 25 indicates passenger 
motion in the entering direction, whereas a signal from the detector 26 
indicates passenger motion in the exiting direction. The detectors 22, 23, 
25, 26 may be used to keep a running count of passengers in the elevator for 

10 dispatching and other purposes, as well as to service the functions of the 
invention (Fig. 3). The detectors 22, 25 will be interconnected with a 
processor disposed within the building by means of the traveling cable, or 
such other communication medium as is used between the elevators and the 
building. The detectors 23, 26 will be connected by wire or in any other 

15 suitable fashion to the processor. 

Referring to Fig. 3, if hardware associated with the detectors 22, 23 
or 25 sense that there is passenger movement in the entering direction, an 
entering interrupt 29 will reach a step 30 to increment a P counter, which 
keeps a running count of the passenger population within the elevator car. 

2 0 And then other programming is reverted to through a return point 31 . 

Similarly, if hardware associated with the detectors 22, 23 or 26 determine 
that there is passenger movement in the exiting direction, an exiting interrupt 
32 will reach a step 33 to decrement the P counter. Periodically, the 
programming reaches a count reset routine through an entry point 34 and a 

2 5 test 35 determines if the elevator is shut down, or not. By that, is meant 

that the elevator is parked with its doors closed and its motor off. Whenever 
such is the case, an affirmative result of test 35 will reach a step 36 to reset 
the P counter to all zeroes, in order to assure that the elevator will start with 
a correct count when it resumes operation. When the elevator is not shut 
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down, a negative result of test 35 reaches other programming through the 
return point 31 . 

Referring to Fig. 4, an exemplary diagram of trip security functions 
which may be performed in order to practice the present invention includes 
entrance into a trip security subroutine through an entry point 36. A first 
test 37 determines if a trip alarm has been set. Initially, it will not, so a test 
38 will determine if the doors of the elevator are fully closed or not. If so, 
the remainder of the routine of Fig. 4 is bypassed and other programming is 
reverted to through a return point 39. When the doors are at least partially 
open, a negative result of test 38 reaches a test 40 to see if a timing delay, 
described hereinafter, is underway or not. Initially it will not be, so a test 41 
determines if this is a secure trip or not. If not, the remainder of Fig. 4 is 
bypassed through return point 39. But if it is a secure trip, the routine 
continues with a step 42 which sets a security stop flag that will interact 
with the safety chain of the elevator and absolutely prevent if from running, 
unless the flag is subsequently reset. This provides the security feature of 
not allowing the elevator to run unless all the passengers thereon are 
authorized for the particular secure trip involved. Then, passenger IDs are 
polled, in a subroutine 43, a step 44 sets a value, I, equal to the number of 
IDs that responded, and the IDs of the passengers are checked in a 
subroutine 45 to see if they are authorized to make the particular trip (which 
may be defined as the particular elevator at a particular time of day, or in 
some other fashion). If not all of the passengers are authorized for the trip, a 
negative result of a test 46 will reach a step 49 to force the door open 
(whether or not it is open), and a step 50 to make an announcement that 
there are unauthorized persons on the elevator, hopefully to cause someone 
who innocently entered the elevator by mistake to leave the elevator. 
Following the announcement, a test 51 determines if a timing interval is 
underway or not. Initially it will not be, so a negative result of test 51 
reaches a step 52 to initiate the interval timer and a step 53 to set the timing 
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latch to indicate that the timing interval is now underway. Then other 
programming is reached through the return point 39. 

In the next pass through the routine of Fig. 4, results of tests 37 and 
38 will be negative, and this time test 40 will be affirmative reaching a test 
55 to determine if the time interval has timed out or not. If not, the 
passengers are once again polled and checked in the subroutines 43 and 45 
and if there still are unauthorized persons on board, a negative result of test 
46 causes step 50 to again make the announcement about unauthorized 
passengers. In a typical system, the announcement will take more time than 
it takes to repetitively reach the routine of Fig. 4 in the processor, so that the 
announcement process will simply be reinforced to repeat the announcement 
until it is cancelled, thereby rendering the step 50 to be redundant in 
subsequent passes. The test 51 will be affirmative this time, so that the 
steps 52 and 53 are bypassed as other programming is reached through the 
return point 39. This process may continue through an affirmative result of 
test 40, a negative result of test 55, a negative result of test 46 and an 
affirmative result of test 51 , until either all unauthorized passengers leave the 
elevator car or the interval timer times out. Assuming the interval timer 
times out, a pass through the routine of Fig. 4 will find affirmative results of 
test 40 and test 55, causing a step 56 to set a trip alarm, which will leave 
the elevator with the security stop flag set, thus interrupting the safety chain 
and causing the elevator to remain where it is, while the alarm condition 
continues. Steps 57 and 58 may store the unauthorized IDs, and the 
difference between the number of passengers and the number of IDs, thus 
indicating why the alarm was set, and a step 59 resets the timing interval 
flag. Subsequent passes through the routine of Fig. 4 will pass through an 
affirmative result of test 37, and a negative result of a test 60 will cause all 
of the routine to be bypassed, preserving the status quo until security 
personnel take charge. When a trip alarm reset button is pressed, the alarm 
condition is reset in a step 61 . 
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Assume that any unauthorized ID passenger has left the elevator car, 
in a subsequent pass through the routine of Fig. 4, an affirmative result of 
test 46 will reach a test 64 to see if the passenger count exceeds the 
number of IDs. If so, an affirmative result of test 64 triggers all the functions 
referred to hereinbefore with respect to a negative result of test 46. If no 
unknown persons are on board, a negative result of test 64 reaches a step 
65 which resets the timing interval flag utilized in tests 40 and 51 , which 
may be redundant if no unauthorized passengers had been present in the first 
place. A step 66 resets the security stop which allows the elevator car to 
move, and a step 62 will cancel the announcement, either to cause the 
announcement to cease if one is being made, or redundantly if no 
unauthorized passengers had been on board the elevator. A step 63 will 
reset the force door open flag, to indicate to the conventional door close 
routine that the security check has been successfully completed, and the 
door close routine may commence. 

The functions illustrated in Fig. 4 will continue to be performed so 
long as the doors are not fully closed. Thus, should a passenger enter the 
elevator at the last minute, the step 42 will again set the security stop flag. 
And as described hereinbefore, the routine will attempt to cause the 
passenger to leave in a period of time, or will end up causing the alarm to be 
set with the security stop flag in place, immobilizing the elevator. 

In Fig. 5, a floor security routine is reached through an entry point 67 
and a first test 68 determines if the doors are fully closed or not. If they are, 
that means there can be no change in passenger population, so an affirmative 
result of test 68 reaches a subroutine 69 to poll the passenger IDs. Then a 
step 70 stores a list of the responding IDs, a step 72 sets a number, I, equal 
to the number of IDs determined in the poll, a step 73 sets a number, U, 
equal to P-l, so that U represents the number of unknown passengers in the 
car, and a step 74 sets a number, N, equal to the current population of 
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passengers, P, in the car. Then other programming is reverted to through a 
return point 76. 

In a subsequent pass through the routine of Fig. 5, if the doors are 
even partially open, a negative result of test 68 will reach a test 77 to 
determine if the floor of the car (C) is a secure floor or not. If not, all of the 
other functions in Fig. 5 are bypassed and other programming is reached 
through the return point 76. But if the floor is secure, a test 78 determines if 
the number of passengers, N, in the car at the time it reached the floor is 
larger than the current number of passengers, P, thereby indicating a 
decrement in the passenger count. If so, a subroutine 79 will poll all of the 
portable devices of the passengers within the car to determine their IDs, a 
step 80a sets I equal to the present number of IDs in the car, and a 
subroutine 80a will provide an exit security check, to compare the 
passengers presently in the elevator with a list of passengers made during 
the trip in subroutine 69 to determine whether the passengers with IDs who 
are now missing are all on the list of authorized passengers for the particular 
floor at which the elevator is stopped. Then a test 81 determines if all of the 
exited passengers were authorized; if not, a step 82 will store the IDs of 
those unauthorized persons who have exited. Then a step 83 will lock all 
doors on the floor, a step 84 will notify security and a step 85 will cause an 
alarm to be set. If desired, in order to not warn the unauthorized passengers 
that they have been detected, setting of the alarm may not include sounding 
an audible alarm, if desired. 

On the other hand, if all of the passengers with IDs who exited were 
authorized, an affirmative result of test 81 will bypass steps 82-85. Whether 
or not any passengers with IDs made unauthorized exits onto the secure 
floor, a test also has to be made to see if any unknown passengers (not 
having IDs) may have exited onto the secure floor. Therefore, a test 88 
determines if the present total number of passengers, P, minus the present 
number of passengers who bear IDs, I, minus the number of original 
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unidentified passengers, U, is less than zero. This will occur only if the 
unidentified passenger count has decreased after the car reached the floor. If 
this count is not less than zero, a negative result of test 88 will bypass the 
remainder of the routine, through the return point 76. This is true whether or 
5 not the alarm may already be set. On the other hand, if an unidentified 
person has left the elevator on the secure floor, an affirmative result of test 
88 reaches a step 90 to store the count of unidentified persons who have left 
the elevator car, and a test 83 determines if the floor alarm has been set yet 
or not. If it has, there is no point in performing the functions of steps 83-85 
10 again so an affirmative result of test 93 bypasses the rest of the program 
through the return point 76. However, if no unauthorized passengers with 
IDs have been detected as leaving the elevator, the floor alarm will not have ' 
been set in step 85 so a negative result of step 93 causes a series of steps 
95-97 to lock the doors, notify security, and set the floor alarm. If there has 
15 been no decrement in the passenger count, a negative result of test 78 
bypasses the steps and tests 79-97. If the car is not stopped at a secure 
floor, all of the steps and tests 77-97 are bypassed by a negative result of 
test 77. 

The description with respect to Figs. 3-5 is illustrative, merely, there 
2 0 being a wide variety of manners in which to utilize the present invention. 

The aforementioned patent application is incorporated herein by 
reference. 

Thus, although the invention has been shown and described with 
respect to exemplary embodiments thereof, it should be understood by those 
2 5 skilled in the art that the foregoing and various other changes, omissions and 
additions may be made therein and thereto, without departing from the spirit 
and scope of the invention. I claim: 
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What is Claimed Is: 

1 . An elevator security system comprising: 

directional motion detection apparatus disposed, with an elevator car 
parked at a landing with its door open, at the access between said landing 
and said car, said detection apparatus providing a continuous count of 
passenger population aboard said elevator car; 

a plurality of portable identification number (ID) transmitting devices, 
each borne by a corresponding passenger, each for transmitting an ID signal 
in said elevator car to thereby identify the corresponding passenger; and 

signal processing means responsive, with said car at a secure floor, 
to said count indicating a decrement of said passenger population and to said 
ID signals for determining whether passengers who have left said car have 
IDs designated as authorized to enter the floor at which said car is stopped, 
and for performing one or more of locking doors on said floor, notifying 
security personnel, and setting an alarm condition unless all of said one or 
more passengers are so authorized. 

2. A system according to claim 1 wherein: 

said signal processing means comprises means for counting the 
number of said IDs among the passengers of said population prior to reaching 
said secure floor and for concurrently comparing it with said passenger count 
to determine the original number, if any, of unknown passengers aboard said 
car, and subsequently, with said car at said secure floor, determining if the 
present total passenger count, minus the present number of IDs, minus said 
original number of unknown passengers is less than zero, and if so, 
performing one or more of locking doors on said floor, notifying security 
personnel, and setting an alarm condition. 

3. A system according to claim 1 wherein said signal processing 
means comprises means for sounding an alarm in the event 

- 10 - 
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that an unauthorized passenger exits said car at a secure 
floor. 

4. A system according to claim 1 wherein said directional motion 
detection apparatus comprises at least one motion detector disposed on said 
car and at least one motion detector disposed on said landing. 

5. A system according to claim 1 wherein said directional motion 
detection apparatus comprises a doppler motion detector. 

6. A system according to claim 5 wherein said doppler motion 
detector is disposed on said car. 

7. An elevator security system comprising: 

directional motion detection apparatus disposed, with an elevator car 
parked at a landing with its door open, at the access between said landing 
and said car, said detection apparatus providing a continuous count of 
passenger population aboard said elevator car; 

a plurality of portable identification number (ID) transmitting devices, 
each borne by a corresponding passenger, each for transmitting an ID signal 
in said elevator car to thereby identify the corresponding passenger; and 

signal processing means responsive to said count and to said IDs for 
determining, when said car is at a landing with its doors not fully closed, if 
each waiting passenger in said car is authorized to make a trip in said car, for 
comparing the number of said IDs to said count to thereby determine if 
unknown passengers are aboard said car, and for interrupting the safety 
chain of said elevator car, thereby to prevent it from running unless all of said 
waiting passengers are authorized to make said trip. 



8. An elevator security system comprising: 
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2 directional motion detection apparatus disposed, with an elevator car 

3 parked at a landing with its door open, at the access between said landing 

4 and said car, said detection apparatus providing a continuous count of 

5 passenger population aboard said elevator car; 

6 a plurality of portable identification number (ID) transmitting devices, 

7 each borne by a corresponding passenger, each for transmitting an ID signal 

8 in said elevator car to thereby identify the corresponding passenger; and 

9 signal processing means responsive, with said car at a secure floor, 

10 to said count indicating a decrement of said passenger population and to said 

11 ID signals for determining whether passengers who have left said car have 

12 IDs designated as authorized to enter the floor at which said car is stopped, 

13 and for performing one or more of locking doors on said floor, notifying 

14 security personnel, and setting an alarm condition unless all of said one or 

15 more passengers are so authorized, said signal processing means responsive 

16 to said count and to said IDs for determining, when said car is at a landing 

17 with its doors not fully closed, if each waiting passenger in said car is 

18 authorized to make a trip in said car, for comparing the number of said IDs to 

19 said count to thereby determine if unknown passengers are aboard said car, 

2 0 and for interrupting the safety chain of said elevator car, thereby to prevent it 

21 from running unless all of said waiting passengers are authorized to make 

22 said trip. 

1 9. A method of securing an elevator landing, comprising: 

2 (a) providing each regular passenger with a portable device which 

3 transmits an ID assigned to the corresponding passenger; 

4 (b) determining the ID of each regular traveling passenger in an 

5 elevator car prior to reaching said landing; 

6 (c) determining the ID of each remaining passenger in said car 

7 after a passenger has left said car at said landing; 
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8 (d) comparing said remaining passenger IDs with said IDs of said 

9 regular traveling passengers, thereby to determine the ID of any regular 

10 ' traveling passenger that left said car at said landing; 

11 (e) sensing the motion of passengers entering and exiting from 

12 said car and providing a continuous count of the passenger population aboard 

13 said car; 

14 (f) comparing the count of population aboard said car prior to 

15 reaching said landing with the count of population aboard said car when said 

16 car is at said landing to determine the number of passengers that have left 

17 said car at said landing; and 

18 (g) determining whether any said passenger that left said car at 

19 said landing is unauthorized to enter upon said landing, and if so, performing 

20 one or more of locking doors on said floor, notifying security personnel, and 

21 setting an alarm condition. 

1 10. A method according to claim 9 wherein said step (g) includes 

2 sounding an alarm. 

1 11. A system according to claim 9 wherein said step (e) is 

2 performed by apparatus comprising at least one motion detector disposed on 

3 said car and at least one motion detector disposed on said landing. 

1 12. A system according to claim 9 wherein said directional motion 

2 detection apparatus comprises a doppler motion detector. 

1 13. A method of providing elevator security, comprising: (a) 

2 providing each regular passenger with a portable device which 

3 transmits an ID assigned to the corresponding passenger; 

4 (b) determining the ID of each regular traveling passenger in an 

5 elevator car prior to reaching said landing; 
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6 (c) determining the ID of each remaining passenger in said car 

7 after a passenger has left said car at said landing; 

8 (d) comparing said remaining passenger IDs with said IDs of said 

9 regular traveling passengers, thereby to determine the ID of any regular 

10 traveling passenger that left said car at said landing; 

11 (e) sensing the motion of passengers entering and exiting from 

12 said car and providing a continuous count of the passenger population aboard 

13 said car; 

14 (f) comparing the count of population aboard said car prior to 

15 reaching said landing with the count of population aboard said car when said 

16 car is at said landing to determine the number of passengers that have left 

17 said car at said landing; 

18 (g) determining whether any said passenger that left said car at 

19 said landing is unauthorized to enter upon said landing, and if so, performing 

20 one or more of locking doors on said floor, notifying security personnel, and 

21 setting an alarm condition; 

22 (h) comparing the count of population aboard said car prior to 

23 leaving a landing on a trip with the number of passengers aboard said car 

24 having IDs to determine if any unknown passengers are aboard said car; 

25 (i) determining the ID of each passenger in an elevator car prior 
2 6 to leaving a landing on a trip; and 

2 7 (j) determining from said count and from said IDs if any 

2 8 passenger aboard said car is unauthorized to make said trip, and if so, 

23 preventing said car from running on said trip. 

1 14. A method of elevator security, comprising: 

2 (a) providing each regular passenger with a portable device which 

3 transmits an ID assigned to the corresponding passenger; 

4 (b) determining the ID of each passenger in an elevator car prior 

5 to leaving a landing on a trip; 
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(c) comparing the count of population aboard said car prior to 
leaving a landing on a trip with the number of passengers aboard said car 
having IDs to determine if any unknown passengers are aboard said car; and 

(d) determining from said count and from said IDs if any 
passenger aboard said car is unauthorized to make said trip, and if so, 
preventing said car from running on said trip. 



- 15 - 



PCT/USOO/18961 



1/4 



r^|x 



tSVA 



xxxxxxxxxxxxxxxx *l \V\ 




x CO|x 




WO 01/07353 



PC77US00/18961 



2/4 





+ 




+ 




+ 




+ 




+ 






+ 




+ 




+ 




+ 




+ 










+ 








+ 




+ 




+ 




+ 










-f- 












+ 






+ 








+ 




+ 




+ 




+ 


+ 








+ 








+ 




+ 






+ 




+ 




+ 




+ 




+ 






+ 




+ 




+ 




+ 




+ 










+ 




+ 




+ 




+ 




+ 






+ 




+ 




+ 




+ 




+ 




+ 






+ 








+ 




+ 




+ 




+ 


+ 








+ 




+ 




+ 




+ 






+ 




+ 




+ 




+ 




+ 






+ 




+ 




+ 




+ 




+ 




+ 






+ 




+ 




+ 




+ 




+ 






+ 




+ 




+ 




+ 




+ 




+ 






+ 




+ 




+ 




+ 




+ 




+ 


+ 




+ 




+ 




+ 




+ 




+ 






+ 




+ 




+ 




+ 




+ 




+ 


+ 




+ 




+ 




+ 




+ 




+ 






WO 01/07353 



KCi/usou/iayoi 



3/4 

(entrng irpt) 



30 



INCR p" | 



FIG.3^ 34 ^32 

( COUNT RST ) ( EXITNG IRPT ) 
| ^-35 



FIG.4 



(TRIP SECURITY Y ~ 



36 



P = zeros] 



^60 

r-jj^ ALARM RST BUTN> 



_ r 37 

Y - <TRIP ALARM> 



N 



RST TRIP ALARM | 



( RETURN ) 



DFC 



TIMING 



N 



SECURE TRIP 




Y 




^42 




SET SECURITY 


STOP| 










Nv 







55 



^ TIMEOUT^ 



^-44 
= NUMBR OF IDs | 



/TRIP ID SECURITY CHECK / 



^-46 

< ALL IDs AUTHORIZED ~y 



65 



66 N 
62- 

63^ 



RST 



/-64 



N 




SET TRIP ALARM 
STR UNAUTH IDs 
STR P-l 
RST TIMING 



50 — 



-FORCE DOOR OPEN 
MAKE ANNOUNCEMENT 



IMING 



— ' RST SECURITY STOP 
CANCEL ANNOUNCEMENT 
RST FORCE DOOR OPEN 



< ^ TIMING ~V ^- 



N 



INIT TIMR - 
SET TIMING- 



-52 
53 



_^-39 
( RETURN ) 



t /- 35 | r 33 

^ <ELEV SHUT~DN> [ DECR P | 

*♦ ^36 



WO 01/07353 



PCTYUSOO/18961 



4/4 



FIG. 5 



67 



(FLOOR SECURITY) 



Y, 



C 



68 



69 



/ POLL PSNGR IDs / 



STR ID LIST 

= NMBR OF IDs- 
U = P-l 
N = P- 



.70 
-72 
73 
74 



FLR(C) = SECURE 



N-P > 





SECURE 

Y ^-79 V 78 



/ POLL PSNGR IDs / 





^800 


1 = NMBR OF IDs | 




^80b 



/EXIT SECURITY CHECK^ 



I 



r 



81 



^ALL EXIT IDs AUTHORIZED^ 

Nj 



STR UNAUTH EXIT IDs 
LOCK FLR DOORS — 
NOTIFY SECURITY — 
SET FLR ALARM 



82 

^83 

-84 
' 85 



88 



<PH- 


-U<0> 


Y 


^90 


STR P-l-U | 




^93 



-^ /flr alarm^ 



N 



LOCK FLR DOORS - 
NOTIFY SECURITY - 
SET FLR ALARM - 



,95 
-96 



~97 



INTERNA 11 UINAi^ iMKLn Kurum 



inter lal Application No 

PCT/US 00/18961 



A. CLASSIFICATION OF SUBJECT MATTER 

IPC 7 B66B1/46 



According to International Patent Classification (IPC) or to both national classification and IPC 



B. FIELDS SEARCHED 



Minimum documentation searched (classification system followed by classification symbols) 

IPC 7 B66B 



Documentation searched other than minimum documentation to the extent thai such documents are included in the fields searched 



Electronic data base consulted during the international search (name of data base and. where practical, search terms used) 

EPO-Internal 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category 0 Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



EP 0 832 839 A (INVENTIO AG) 

1 April 1998 (1998-04-01) 

column 2, line 3 -column 3, line 49 



US 5 749 443 A ( R0MA0 ULISSES G) 

12 May 1998 (1998-05-12) 

column 3, line 13 -column 5, line 18 

EP 0 528 188 A (K0NE ELEVATOR GMBH) 
24 February 1993 (1993-02-24) 
column 2, line 48 -column 3, line 28 



7,14 

1-3, 
8-10,13 

1-14 



1,7-9, 
13,14 



□ 



Further documents are listed in the continuation of box C. 



Patent family members are listed in annex. 



° Special categories of cited documents : 



document defining the general state of the art which is not 
considered to be of particular relevance 

E' earlier document but published on or after the international 
filing dale 

L* document which may throw doubts on priority claim(s) or 
which is cited to establish the publication date of another 
citation or other special reason (as specified) 
document referring to an ora! disclosure, use. exhibition or 
other means 

document published prior to the international filing date but 
later than the priority date claimed 



'A' 



•O' 



'T* later document published after the international filing date 
or priority date and not in conflict with the application but 
cited to understand the principle or theory underlying the 
invention 

'X" document of particular relevance: the claimed invention 
cannot be considered novel or cannot be considered to 
involve an inventive step when the document is taken alone 

"Y" document of particular relevance; the claimed invention 

cannot be considered to involve an inventive step when the 
document is combined with one or more other such docu- 
ments, such combination being obvious to a person skilled 
in the art. 

document member of the same patent family 



Date of the actual completion of the international search 



23 November 2000 



Date of mailing of the international search report 



30/11/2000 



Name and mailing address of the ISA 

European Patent Office. P.B. 5818 Palenilaan 2 
NL - 2280 HV Rijswijk 
Tel. (+31-70) 340-2040. Tx. 31 651 epo nl. 
Fax: (+31-70) 340-3016 



Authorized officer 



Pham, P 



Form PCT/ISA/210 (second sheet) (July 1992) 



...ormation on patent family members 


Inter lai Application No 

PCT/US 00/18Q61 


Patent document 
cited in search report 


Publication 
date 


Patent family 
memberfs) 


Publication 
date 


EP 0832839 A 


01-04-1998 


CA 


C-C l u j o 1 n 


27-03-1998 






jp 


10109843 A 


28-04-1998 




• 


us 


5932853 A 


03-08-1999 




iz-uo-iyyo 


BR 


9602204 A 


07-04-1998 






JP 


8319069 A 


a "i i o i nnr 

03-12-1996 






FI 


913857 A 


i c a o 1 A A O 

16-02-1993 






AT 


128944 T 


in t a i a a r~ 

15-10-1995 






AU 


654568 B 


i a t i "i aa x 

10-11-1994 






AU 


2032892 A 


in A A i A A o 

18-02-1993 






CA 


2076154 A,C 


16-02-1993 






DE 


69205372 D 


1^11 T A A P 

16-11-1995 






DE 


69205372 T 


04-04-1996 






DK 


528188 T 


oo ai 1 aa 

22-01-1996 






ES 


2077940 T 


A 1 "IO 1 A A I - 

01-12-1995 






HK 


187995 A 


22-12-1995 






JP 


2597448 B 


09-04-1997 






JP 


5193850 A 


03-08-1993 






US 


5435416 A 


25-07-1995 



Form FCT/iSA/210 (paieni family annex) (July 1992) 



